NimbostratusIn our current SSL VPN solution, we are able to log everytime a user logs in and logs out. This was a requirement on the F5 SSL VPN solution as well through APM.
I posted the question in a different forum and wanted to share it here -
https://devcentral.f5.com/community...065/asg/50
Employee
The information is in the /var/log/apm file...
[root@apm-device:Active:Standalone] log grep ca0767ca apm | egrep "Session deleted due|AD agent: Auth"
Feb 26 14:58:51 apm-device info apd[5720]: 01490017:6: ca0767ca: AD agent: Auth (logon attempt:0): authenticate with 'scoope' successful
Feb 26 15:14:06 apm-device notice tmm[8414]: 01490502:5: ca0767ca: Session deleted due to user inactivity or errors.
[root@apm-device:Active:Standalone] log
You can write a script to parse the logs and get all the information you need...
Thanks,
Seth Cooper
Nimbostratus